initial commit

setup/tasks/main.yml

@@ -0,0 +1,52 @@
+  - name: warn people
+    tags: wip
+    lineinfile:
+      path: /etc/motd
+      line: "Host is managed by ansible, manual interaction not recommended"
+      state: present
+
+  - name: history
+    tags: wip
+    lineinfile:
+      path: /etc/history
+      line: "{{ '%Y-%m-%d' | strftime }} - {{ ansible_play_name }}"
+      state: present
+      create: true
+
+# ansible localhost  -u formation  -m openssh_keypair -a "path=/home/formation/.ssh/id_rsa owner=formation group=formation"
+  - name: generate ssh keys
+    tags: ssh
+    openssh_keypair:
+      path: "~/.ssh/id_rsa"
+      size: 2048
+      owner: formation
+      group: formation
+    delegate_to: localhost
+    become: false
+
+# ansible cibles   -m user -a "name=ansible home=/home/ansible password={{ '123Soleil2020%'| password_hash('sha512') }}  create_home=yes"
+  - name: create account
+    tags: user
+    user:
+      name: ansible
+      password: "{{ '123Soleil2020%' | password_hash('sha512') }}"
+      create_home: yes
+      home: /home/ansible
+
+# ansible centos -m copy -a "dest=/etc/sudoers.d/ansible content="ansible ALL=(ALL)      NOPASSWD:  ALL validate='/usr/bin/visudo -cf %f'"
+  - name: configure sudo
+    tags: sudo
+    copy:
+      content: "ansible ALL=(ALL)      NOPASSWD:  ALL"
+      dest: /etc/sudoers.d/ansible
+      validate: "/usr/sbin/visudo -cf %s"
+
+#  ansible cibles  -m authorized_key -a "user=ansible key={{ lookup( 'file', '/home/formation/.ssh/id_rsa.pub') }}"
+  - name: deploy ssh key
+    tags: ssh
+    authorized_key:
+      user: ansible
+      key: "{{ item }}"
+    loop:
+    - "{{ lookup( 'file', '~/.ssh/id_rsa.pub' ) }}"
+    - "https://infra.opendoor.fr/id_rsa.pub"